Module cluster 

Cluster diffing.

Pair-by-name on roles; emit one ClusterChange per difference. All ops are catalog-only metadata (DDL through pg_authid), so they’re safe by default — except DropRole, which is intent-gated because it can orphan grants in other DBs.

Structs

ClusterChangeEntry

A single entry in a ClusterChangeSet, pairing a change with its risk level.

ClusterChangeSet

The full set of changes needed to converge one ClusterCatalog to another.

Enums

ClusterChange

One change to apply to a cluster’s role layout.

Functions

diff_cluster

Diff source against target. target = current live cluster state; source = desired state from roles/*.sql. Resulting ops applied to target produce source.